27 results · Feed
-
Medium 6.2
Pidgin 2.13.0 Denial of Service via Malformed Username
Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creation. Attackers can input a buffer of 1000 characters in the username field and t…
-
Unscored —
Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parse_tag_and_wiretype in prot…
-
Unscored —
An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client co…
-
Unscored —CVE-2012-1257 Public exploit
Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information v…
-
High 7.5
An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server …
-
Unscored —
The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashe…
-
Unscored —
A directory traversal exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the …
-
Unscored —
A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data se…
-
Unscored —
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent…
-
Unscored —
A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data se…
-
Unscored —
An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted…
-
Unscored —
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent…
-
Unscored —
A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data se…
-
Unscored —
An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the ser…
-
Unscored —
An out-of-bounds write vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data…
-
Unscored —
A NULL pointer dereference vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT …
-
Unscored —
An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the ser…
-
Unscored —
A buffer overflow vulnerability exists in the handling of the MXIT protocol Pidgin. Specially crafted data sent via the…
-
Unscored —
A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data se…
-
Unscored —
An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent to the serv…
-
Unscored —
An exploitable out-of-bounds read exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT contact…
-
Unscored —
Multiple memory corruption vulnerabilities exist in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT…
-
Unscored —
The (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in libpurple in Pidgin before 2.10.10 …
-
Unscored —
The jabber_idn_validate function in jutil.c in the Jabber protocol plugin in libpurple in Pidgin before 2.10.10 allows …
-
Unscored —
markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of s…
-
Unscored —
nmevent.c in the Novell GroupWise protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause …
-
Unscored —
libgadu before 1.11.4 and 1.12.0 before 1.12.0-rc3, as used in Pidgin and other products, allows remote Gadu-Gadu file …